[wp-trac] [WordPress Trac] #63611: wp_widget_rss_output: HTML entities that are part of HTML tags should be removed

WordPress Trac noreply at wordpress.org
Tue Nov 4 07:41:29 UTC 2025


#63611: wp_widget_rss_output: HTML entities that are part of HTML tags should be
removed
-------------------------------------------------+-------------------------
 Reporter:  wildworks                            |       Owner:  wildworks
     Type:  defect (bug)                         |      Status:  assigned
 Priority:  normal                               |   Milestone:  6.9
Component:  Widgets                              |     Version:
 Severity:  normal                               |  Resolution:
 Keywords:  good-first-bug has-test-info has-    |     Focuses:
  patch commit                                   |
-------------------------------------------------+-------------------------
Changes (by wildworks):

 * owner:  (none) => wildworks
 * status:  new => assigned


Comment:

 @SirLouen @mukesh27, I plan to commit [https://github.com/WordPress
 /wordpress-develop/pull/9042 PR 9042] with the following message before
 the Beta 3 release. If you have any feedback regarding the commit message,
 please leave a comment.


 {{{
 Widgets: Decode HTML entities in RSS widget titles before escaping.

 Some RSS feeds include HTML tags that have been escaped to entities (for
 example `<em>` appears as `<em>`), causing the literal entity text
 to appear in the title.

 The `wp_widget_rss_output()` function now runs `html_entity_decode()` on
 the title before `strip_tags()` and escaping, ensuring titles render
 cleanly without displaying escaped tags.

 Fixes #63611.

 Props ankitkumarshah, SirLouen, mukesh27, n8finch, rollybueno,
 sachinrajcp123.
 }}}

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/63611#comment:27>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list